The vulnerability of the IBM DB2 database management system, related to deficiencies in access control, allows a perpetrator to execute arbitrary code.

🗓️ 03 Nov 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

International Business Machines database system has access control deficiencies that enable remote arbitrary code execution.

Reporter	Title	Published	Views	Family All 30
IBM Security Bulletins	Security Bulletin: IBM DB2 used by IBM Security Verify Governance, Identity Manager virtual appliance component has multiple vulnerabilities	30 Jun 202306:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DB2 used by IBM Security Verify Governance has multiple vulnerabilities	10 Jan 202404:23	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in IBM DB2 affects IBM Application Performance Management products.	13 Sep 202307:50	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM Db2 shipped with IBM Security Guardium Key Lifecycle Manager (CVE-2023-27559, CVE-2023-26022, CVE-2023-25930, CVE-2023-26021, CVE-2023-27555, CVE-2023-29255, CVE-2023-29257)	18 May 202307:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM DB2 affect IBM Operations Analytics Predictive Insights	12 Jun 202312:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to multiple issues due to IBM Db2	6 Jun 202315:24	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for May 2023	26 Jun 202316:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Virtualization Engine TS7700 is susceptible to multiple vulnerabilities due to the use of IBM Db2	6 May 202422:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® is vulnerable to remote code execution as a database administrator of one database may execute code or read/write files from another database within the same instance. (CVE-2023-29257)	24 Apr 202321:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2® Warehouse has released a fix in response to multiple vulnerabilities found in IBM Db2®	20 Jun 202314:46	–	ibm

Vulners

Node

ibm ibm_db2Range11.5.0–11.5.7

Source	Link
ibm	www.ibm.com/support/pages/node/6985691
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/252011
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2023050912
web	www.web.nvd.nist.gov/view/vuln/detail

03 Nov 2023 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 37.2

CVSS 29

EPSS0.01513

International Business Machines database system access control remote execution arbitrary code